dbt-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to executealtimate-dbtCLI commands and a suite of SQL analysis utilities (altimate_core_semantics,altimate_core_column_lineage,altimate_core_correct,altimate_core_fix, andsql_fix) for project diagnostics, SQL compilation, and database interaction. - [EXTERNAL_DOWNLOADS]: The troubleshooting guide recommends installing the
dbt-corepackage usingpipif it is detected as missing during the environment health check. - [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted external data including SQL model files, dbt configuration files (YAML), and runtime error messages, which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: The skill reads dbt error messages, project source code, and SQL files provided by the user or found in the project directory.
- Capability inventory: The agent has access to
bashfor command execution,read/editfor file system operations, and database query capabilities viaaltimate-dbt execute. - Boundary markers: The instructions do not define specific delimiters for separating external data from instructions, but provide a structured diagnostic framework for the agent to follow.
- Sanitization: The skill employs specialized vendor-provided tools to analyze and correct SQL and error messages, providing a layer of validation between the raw error data and the suggested fixes.
Audit Metadata